(2022-04-29) WikiGraph embeds not working on Firefox
Suddenly I've noticed WikiGraph embeds not working on Firefox (android). Another stop on the WikiGraph JavaScript Widgets Vs Browser Security saga.
Paul Wright found In looking at the page, it has been found that the site is sending only the domain name - i.e. http://webseitz.fluxent.com instead of http://webseitz.fluxent.com/wiki/TwinPages - this is triggering a new feature in Firefox 100
Now I see Firefox ignores several referrer policies for cross-site subresource/iframe requests to improve user privacy by preventing privacy leaks. These include unsafe-url, no-referrer-when-downgrade, and origin-when-cross-origin. I use unsafe-url
.
Paul suggested I check out the WebCompatibility room in matrix.org, so I've found where he had the discussion with moz folks. Yes, this is an intentional "improvement" in privacy.
It may hit Chromium, too?
They suggest I just pass the full container URL directly as a query-arg like http://www.wikigraph.net/backlinks.js?url=http%3A%2F%2Fwebseitz.fluxent.com%2Fwiki%2FTwinPages
(If that becomes a problem, is CORS an alternative?
May18 - Mac Firefox just updated, now has same issue.
otoh, Firefox has so few users....
otooh maybe solving this will also be good for ios Safari users....
otoooh I don't want to play with Javascript...
Edited: | Tweet this! | Search Twitter for discussion